Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5a5c5891-0f6a-4c17-9e93-8c3a4bc7870c/95430a08dd3b1725d69b93408f28bb5cdf63994e.roa
File: 95430a08dd3b1725d69b93408f28bb5cdf63994e.roa (raw, json)
Hash identifier: fEwgxIkM4JgZgW6qoPXtWXY/AdIn4sy5MJjQMdwZa10=
Subject key identifier: B9:7A:00:0A:EF:53:EB:1B:63:FC:D7:06:CA:5B:F8:0C:C7:3A:F9:C8
Certificate issuer: /CN=b4cd293c91ec205157dbfa9b56d9881f8f695255
Certificate serial: 06D70E
Authority key identifier: 9D:F0:E9:0B:DB:35:A7:8B:B3:32:08:01:8C:C2:8E:F4:B2:38:4B:33
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4cd293c91ec205157dbfa9b56d9881f8f695255.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5a5c5891-0f6a-4c17-9e93-8c3a4bc7870c/95430a08dd3b1725d69b93408f28bb5cdf63994e.roa
Signing time: Wed 24 Mar 2021 14:41:40 +0000
ROA not before: Wed 24 Mar 2021 14:41:38 +0000
ROA not after: Tue 24 Mar 2026 14:41:38 +0000
asID: 264637
IP address blocks: 170.80.20.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 448270 (0x6d70e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4cd293c91ec205157dbfa9b56d9881f8f695255
Validity
Not Before: Mar 24 14:41:38 2021 GMT
Not After : Mar 24 14:41:38 2026 GMT
Subject: CN=95430a08dd3b1725d69b93408f28bb5cdf63994e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:83:72:dc:f3:b3:36:99:5c:60:55:f6:25:31:
5f:84:ec:d8:83:be:27:41:fc:1c:6e:3e:08:48:d7:
cd:4e:54:4b:cf:3f:47:b5:b1:51:f4:cb:5a:06:1d:
3d:e8:8a:69:e2:06:c8:00:46:83:3e:0a:b3:3b:02:
90:c0:6a:d6:77:2c:06:f7:4d:04:48:b1:29:6e:03:
ab:4a:80:e6:51:88:19:02:61:81:c1:73:c4:45:43:
39:3d:2a:95:d4:f9:2e:11:6e:76:f1:9f:39:71:bc:
88:6b:c2:62:1b:60:ae:63:c1:2b:1f:f6:3a:4d:17:
ea:a0:ed:43:49:35:de:a7:7b:76:99:5c:99:07:18:
f6:2f:11:49:6b:d5:60:d8:bb:3e:a1:77:f4:51:39:
d0:2d:67:b0:bd:54:02:69:b1:21:73:c4:17:76:f0:
ca:c2:5b:02:69:44:84:c1:c2:a3:f0:00:31:c1:6c:
9d:08:6b:c6:a2:39:2d:37:8d:93:00:d1:3a:bb:71:
79:3b:a7:39:f4:22:dc:52:35:40:57:84:67:fa:5e:
61:53:f5:b8:27:0b:38:ae:05:70:bd:03:9f:3f:30:
33:ef:9f:0a:7f:c2:fe:38:1d:a0:bf:10:94:e3:49:
99:85:11:d6:d8:cc:74:5d:2f:68:d9:3b:3d:34:86:
8b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:7A:00:0A:EF:53:EB:1B:63:FC:D7:06:CA:5B:F8:0C:C7:3A:F9:C8
X509v3 Authority Key Identifier:
keyid:9D:F0:E9:0B:DB:35:A7:8B:B3:32:08:01:8C:C2:8E:F4:B2:38:4B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4cd293c91ec205157dbfa9b56d9881f8f695255.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5a5c5891-0f6a-4c17-9e93-8c3a4bc7870c/95430a08dd3b1725d69b93408f28bb5cdf63994e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5a5c5891-0f6a-4c17-9e93-8c3a4bc7870c/b4cd293c91ec205157dbfa9b56d9881f8f695255.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.80.20.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:c5:b7:95:66:fb:e1:fd:1e:59:b7:24:1e:1d:ef:eb:89:7d:
ec:dd:68:56:7e:63:cb:fd:3b:7e:46:43:e4:6b:e5:fc:ac:e1:
97:4b:93:e6:a1:3a:4c:51:b5:29:f3:ec:49:1d:03:a4:00:98:
3f:c9:c0:2e:43:11:52:8b:e9:95:2b:c3:33:f4:6d:dc:66:1f:
8e:00:21:e3:8a:8c:a6:6a:fe:f8:7d:25:51:f7:63:be:a6:1e:
7a:6a:43:45:b7:d6:1e:c7:15:51:59:71:03:e9:e5:3c:29:e8:
61:d5:d9:f8:c0:3a:6c:fb:12:d1:c9:99:59:0f:41:a8:ec:87:
34:86:b4:9c:bb:20:05:e6:78:2e:80:c9:06:e1:82:83:02:ba:
0b:90:2c:1c:04:3c:4a:ae:df:30:4c:04:e1:5d:c7:be:e9:3f:
54:c0:16:fd:a8:dc:9a:de:4e:d7:dd:02:4a:5c:5f:17:e6:1f:
be:3e:01:76:98:b9:6f:c1:d5:f1:67:41:6b:a4:e1:6f:3e:36:
88:73:67:70:a1:da:0c:17:f9:d0:85:49:10:90:0b:11:da:d6:
b2:44:a5:1a:ff:b2:79:2c:f5:a5:9a:d2:d3:4c:21:a4:5f:b8:
d2:f9:ee:78:e1:76:c8:dd:ab:49:5f:06:1a:51:9a:f4:97:93:
2c:c2:e3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 10 01:40:47 2023 by rpki-client on console-ams.rpki-client.org